Dashboard / CVE-2023-33951

CVE-2023-33951

MEDIUM
MEDIUM Priority: 0.02 BB Relevance: 21/100
Published: 2023-07-24 Modified: 2026-11-06 First seen: 2026-11-06 Status: active

Attack Surface

No Interaction Conf. Impact Scope Change

CVSS Vector Breakdown

AV: Local
AC: High
PR: High
UI: None
S: Changed
C: High
I: None
A: None

Description

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context of the kernel.

Weakness Classification (3)

Affected Software (5)

VendorProductVersion
linux linux_kernel < 6.3.9
redhat enterprise_linux 8.0
redhat enterprise_linux 9.0
redhat enterprise_linux_for_real_time 8.0
redhat enterprise_linux_for_real_time_for_nfv 8.0

References & Advisories (9)

https://access.redhat.com/errata/RHSA-2023:6583
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2023:6901
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2023:7077
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:1404
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:4823
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:4831
vendor-advisory x_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2218195
issue-tracking x_refsource_REDHAT

Bug Bounty Relevance

21 / 100
✓ No user interaction

CVSS Score

5.3 / 10.0 v3.1
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

EPSS — Exploitation Probability

0.34%
Raw Score 0.003430
Percentile 28.3%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00343
2026-11-12
0.00343
2026-11-10
0.00343
2026-11-09
0.00343
2026-11-08
0.00343
2026-11-07
0.00343
2026-11-06
0.00343

Intelligence Sources

mitre ref →
nvd ref →

External Links